In summary, what have we learned in this first lesson?
Well, there was certainly a time when Group Policy was the only way,
the only first party Microsoft way, for truly enforcing system
security. And we've seen subsequently a number of trends,
most of which, let's see if all of these I've integrated into
this training, yeah, cloud‑based AI algorithms,
hybrid cloud integration, being able to reach across
not just a dedicated connection,
like a site‑to‑site virtual private network, or an ExpressRoute circuit,
but also just simply native cloud deployments.
You can include those machines and manage them centrally
in Azure in a number of different ways.
Azure Arc for servers comes to mind principally. We also have
the trend of really working to lock down the hardware, such
that the server, when it's booted,
it will only boot trusted code. You've got hopefully drive encryption,
like BitLocker, coming into the situation. And then once the server is
booted and its services are running, only, again, trusted and allowed
device drivers in code or running and anything that's not explicitly
allowed will be blocked.
That's an ideal situation, but it's a good one.
So you might be saying now that's cool about the computers
and the server security, but it's our users who tend to get
into trouble most of the time.
What can we do in the Hybrid Cloud Windows Server Administrator role to help
these users and to protect their identities? Well, of course,
as usual, I like to lead you and transition you from module to module.
So I will see you in the next module entitled Secure
Hybrid Active Directory Accounts. Thanks for your attention. Happy studying!